$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft File: Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft (raw, json) Hash identifier: 5VreQ0viZtpvs+tya+O459zHtc9UHW+WwbnhwsV8T5Q= Subject key identifier: 7A:C9:8F:E0:65:54:4A:14:CF:85:AC:11:C3:34:1E:EE:17:58:55:7F Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Certificate serial: 0281 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft Manifest number: 0274 Signing time: Sun 19 May 2024 03:44:58 +0000 Manifest this update: Sun 19 May 2024 03:44:58 +0000 Manifest next update: Sun 26 May 2024 03:44:58 +0000 Files and hashes: 1: Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl (hash: n5rmm8+6HIBTnV3TjX28iyh4ExcVtsAMA+OzXWV0sNY=) 2: F6542C72C53511ECA64F3010C4F9AE02.roa (hash: Wt9pMWKxr+daOi/B9m/xRaP82vVhCrzp4mOJhmuxsCo=) 3: 2D1405C0C6CB11ECB185E43EC4F9AE02.roa (hash: XecBqqisXSKLGQ9HAXEQoFYf4wembyQPpbTzSWQ2As0=) 4: F6D63384C53511ECA64F3010C4F9AE02.roa (hash: wAinW3EzbrBxNVmPBx/cE+ByR4TusgaQNiUtZIMngpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 641 (0x281) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99 Validity Not Before: May 19 03:44:58 2024 GMT Not After : May 26 03:44:58 2024 GMT Subject: CN=664975ba-99bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c8:3a:b8:40:cf:8b:da:11:2c:b4:3b:1b:f3: 0a:5d:92:27:ca:07:37:5d:8e:5b:0d:c5:6f:44:36: 72:91:1f:04:43:b7:de:60:44:af:3e:8d:72:b4:1b: 09:19:91:7a:35:51:47:f2:e3:cf:2d:48:66:cb:76: 1f:d2:de:a9:5b:37:74:53:35:27:c0:51:71:5c:7d: a5:20:5f:c8:73:dc:39:aa:ef:90:4d:f5:27:7a:32: 2c:62:48:de:a3:8b:ae:0a:83:2a:23:98:e8:a9:a3: e2:f4:7e:30:ca:66:c6:af:2f:b5:aa:4e:73:33:c0: 00:7a:b7:b4:fc:84:7e:1b:a5:28:e8:0b:b2:f2:3b: c9:1f:a6:c2:85:44:67:b2:78:9c:0c:ce:14:8d:af: 93:e4:07:a4:11:9e:74:fe:f3:82:04:3f:d4:d6:af: 8a:f6:c0:31:39:a3:83:0d:d7:45:5b:6d:8f:8f:cd: 9b:84:f2:ac:f8:92:28:3f:2b:89:1b:11:fa:c2:40: 7a:a9:e3:fb:c2:96:a2:f4:0d:5a:57:b2:06:59:1d: 45:91:4b:91:f7:35:21:3f:5d:2b:e3:f7:d9:13:25: 62:89:4a:28:d7:7f:a7:61:67:66:24:5e:39:b7:f8: 65:ee:3a:56:83:d7:fe:b5:8a:fc:b0:60:6b:81:e9: 3a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C9:8F:E0:65:54:4A:14:CF:85:AC:11:C3:34:1E:EE:17:58:55:7F X509v3 Authority Key Identifier: keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:6e:a2:e8:b7:06:79:af:3e:26:6e:23:2a:00:c4:02:ac:1a: aa:3a:a6:b5:d6:56:7d:73:02:2e:91:41:40:2f:97:14:82:dd: ad:6c:f9:dc:d6:59:26:c8:f1:9a:ba:ce:c5:c8:eb:3d:ec:30: b5:b6:28:72:7e:4d:0a:5c:5c:4f:52:50:39:70:d9:17:ed:c2: 17:22:39:2a:6d:98:9b:99:35:61:31:3e:f7:3f:e6:89:3f:fa: d5:d4:1a:f7:d2:34:e4:39:3d:cc:1b:17:24:54:2a:41:21:69: 4d:41:81:33:29:0a:b9:0c:02:01:fb:52:99:12:97:73:65:a4: 9c:17:42:8c:9a:32:e4:8b:98:17:e1:93:4d:91:cf:98:05:cd: d5:9c:73:8f:cb:84:b8:cb:29:2d:04:36:13:e0:7f:20:b7:85: f0:df:32:00:b4:19:09:8f:60:8e:8b:91:5c:1e:d3:f9:95:b5: 47:8d:22:8a:de:55:2f:bf:5d:16:02:f5:db:1e:91:df:39:30: 94:9e:08:fd:39:27:53:65:63:62:a8:d8:63:5e:f7:03:af:c5: c0:03:0c:82:56:7f:60:eb:29:0d:3c:9b:09:9a:03:97:66:31: b2:3a:00:3a:b9:71:4c:d3:3a:a9:2a:30:e3:44:a2:14:16:a8: 87:46:68:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZDMkMxMTAvBgNVBAUTKDFBRDlCRDlEQzc3MzE1QkQxMDJEQUY1QUE5RjkyNTY2 QjJDMkZCOTkwHhcNMjQwNTE5MDM0NDU4WhcNMjQwNTI2MDM0NDU4WjAYMRYwFAYD VQQDEw02NjQ5NzViYS05OWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMg6uEDPi9oRLLQ7G/MKXZInygc3XY5bDcVvRDZykR8EQ7feYESvPo1ytBsJ GZF6NVFH8uPPLUhmy3Yf0t6pWzd0UzUnwFFxXH2lIF/Ic9w5qu+QTfUnejIsYkje o4uuCoMqI5joqaPi9H4wymbGry+1qk5zM8AAere0/IR+G6Uo6Auy8jvJH6bChURn snicDM4Uja+T5AekEZ50/vOCBD/U1q+K9sAxOaODDddFW22Pj82bhPKs+JIoPyuJ GxH6wkB6qeP7wpai9A1aV7IGWR1FkUuR9zUhP10r4/fZEyViiUoo13+nYWdmJF45 t/hl7jpWg9f+tYr8sGBrgek6tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrJj+Bl VEoUz4WsEcM0Hu4XWFV/MB8GA1UdIwQYMBaAFBrZvZ3HcxW9EC2vWqn5JWaywvuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkMyQy9CMDRFOTE5Q0M1 MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZiMFFMYTlhcWZrbFpyTEMt NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d0bTluY2R6RmIwUUxhOWFxZmtsWnJMQy01ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkMyQy9CMDRFOTE5Q0M1MzMxMUVDOTZERjMxMEZDNEY5QUUwMi9HdG05bmNkekZi MFFMYTlhcWZrbFpyTEMtNWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXbqLotwZ5rz4mbiMqAMQCrBqqOqa11lZ9cwIukUFAL5cUgt2tbPnc 1lkmyPGaus7FyOs97DC1tihyfk0KXFxPUlA5cNkX7cIXIjkqbZibmTVhMT73P+aJ P/rV1Br30jTkOT3MGxckVCpBIWlNQYEzKQq5DAIB+1KZEpdzZaScF0KMmjLki5gX 4ZNNkc+YBc3VnHOPy4S4yyktBDYT4H8gt4Xw3zIAtBkJj2COi5FcHtP5lbVHjSKK 3lUvv10WAvXbHpHfOTCUngj9OSdTZWNiqNhjXvcDr8XAAwyCVn9g6ykNPJsJmgOX ZjGyOgA6uXFM0zqpKjDjRKIUFqiHRmiX -----END CERTIFICATE-----Generated at Sun May 19 04:22:04 2024 by rpki-client on console-fra.rpki-client.org